$ rpki-client -vvf repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft File: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft (raw, json) Hash identifier: YOtczu+DBBPrl0NepHv+4lapcfGoCwdOdqVO8jrNiAk= Subject key identifier: 12:44:99:98:45:47:63:87:CA:9E:8E:25:47:62:1A:B0:0D:2A:39:AF Authority key identifier: 29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A Certificate issuer: /CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Certificate serial: 2EED521F94289CBA64FB33B7ED17A6283D332FB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft Manifest number: 0127 Signing time: Thu 19 Mar 2026 01:41:50 +0000 Manifest this update: Thu 19 Mar 2026 01:36:50 +0000 Manifest next update: Sun 22 Mar 2026 05:22:50 +0000 Files and hashes: 1: 32372e3132342e37342e302f32332d3234203d3e20313532303532.roa (hash: 3Di6pAbEyZCpXZLge7Vqx+6QVFgcVq47/UIjvzmKJsw=) 2: 32372e3132342e37342e302f32342d3234203d3e20313532303532.roa (hash: 6mgkKY9kBfU7sAQ5w8Wubk22DIAe6sIX9Uol4iEtsCA=) 3: 32372e3132342e37352e302f32342d3234203d3e20313532303532.roa (hash: 0DxE8IbNsFsaPMHC2EuXiwZ1jqzI32HI1P7GaHMey18=) 4: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl (hash: BNhfKqG6eBspXvZeQsnmUEJLErrmW1VZnqCwfCA0z+4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 05:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ed:52:1f:94:28:9c:ba:64:fb:33:b7:ed:17:a6:28:3d:33:2f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Validity Not Before: Mar 19 01:36:50 2026 GMT Not After : Mar 22 05:22:50 2026 GMT Subject: CN=1244999845476387CA9E8E2547621AB00D2A39AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3c:ae:d8:82:e3:7c:ba:01:94:e7:df:a1:92: c9:12:f4:c2:70:fb:fb:a7:d9:45:41:47:9f:4a:d7: 4f:e2:03:32:79:55:20:ba:14:9f:55:37:4c:f5:50: 8d:20:4a:cb:86:16:75:b0:a7:59:6f:83:75:8b:98: 56:78:77:db:f7:ef:6f:26:98:8b:1a:4a:b7:fb:8d: ac:95:3d:13:25:9b:46:c8:b7:fb:9b:57:13:bd:14: 11:29:4f:02:b6:56:b2:01:93:9c:9a:24:5f:fe:46: 10:9e:c2:c6:06:05:39:64:f1:c8:b1:9e:31:5f:1d: 38:9c:ce:fb:40:34:e2:a6:4f:5e:c5:57:2b:75:62: 8d:7e:6c:a3:30:89:98:57:7a:ae:ec:d1:49:49:60: fe:43:e1:5b:71:90:34:b4:a2:b7:63:3a:4a:27:c5: 2f:5d:1a:f2:59:40:eb:8c:41:de:e4:36:2c:f6:f6: 82:03:a4:a7:3c:37:b9:9a:74:ee:b1:85:27:46:a7: 62:14:36:ac:00:22:a2:c7:92:fe:6a:59:8e:9f:cd: 55:43:3e:13:dc:ac:93:ad:78:50:e4:1e:54:12:97: de:c5:93:92:2b:21:3b:54:47:08:42:d3:b1:66:29: ef:f1:3c:24:e9:1b:8a:b7:14:7d:09:2d:2f:f4:a1: bc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:44:99:98:45:47:63:87:CA:9E:8E:25:47:62:1A:B0:0D:2A:39:AF X509v3 Authority Key Identifier: keyid:29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:6c:ca:c9:b7:d9:5a:7a:28:37:15:4b:35:8f:47:ff:10:66: 2a:09:09:5c:99:31:22:03:16:22:f7:5c:e6:dd:0e:e2:45:70: 47:a7:be:f8:cf:de:62:3b:fa:aa:f0:f7:a8:0a:b9:b1:2a:a6: 9c:0a:92:7e:b0:f3:75:04:34:cf:93:a0:03:57:7f:40:4d:5c: 73:b9:36:52:e0:81:3d:af:36:32:34:0e:3d:44:88:95:17:5e: 79:1e:d9:ac:ae:9d:38:8d:aa:77:df:fc:27:d5:fe:7f:64:1c: 94:04:cd:90:c9:d2:e2:08:77:36:72:45:db:1c:b1:2a:a9:cb: 4d:20:6b:91:33:5c:ac:8e:ab:ab:77:54:66:1e:e9:9f:0a:cf: 8b:e5:4b:ac:98:e9:6a:9c:bc:b4:0a:54:8b:88:e6:e8:7b:71: 51:01:1e:e3:bc:d2:6d:84:1e:bc:6a:d1:16:9b:53:60:a1:5c: 8e:31:9c:a3:eb:3d:e6:67:ef:a3:b8:04:5c:3d:9f:13:41:37: f3:ac:ca:19:32:35:cf:f9:49:ba:e5:5c:bd:2b:99:58:e1:db: d0:d3:3e:a6:67:2b:2b:f6:32:e5:e5:77:1e:27:6b:58:0c:5c: 29:9f:5e:c6:64:96:91:cb:be:fb:b2:99:34:88:e5:f3:2d:4c: e4:14:12:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULu1SH5QonLpk+zO37RemKD0zL7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBF MEU3Q0Y5QTAeFw0yNjAzMTkwMTM2NTBaFw0yNjAzMjIwNTIyNTBaMDMxMTAvBgNV BAMTKDEyNDQ5OTk4NDU0NzYzODdDQTlFOEUyNTQ3NjIxQUIwMEQyQTM5QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoPK7YguN8ugGU59+hkskS9MJw +/un2UVBR59K10/iAzJ5VSC6FJ9VN0z1UI0gSsuGFnWwp1lvg3WLmFZ4d9v3728m mIsaSrf7jayVPRMlm0bIt/ubVxO9FBEpTwK2VrIBk5yaJF/+RhCewsYGBTlk8cix njFfHTiczvtANOKmT17FVyt1Yo1+bKMwiZhXeq7s0UlJYP5D4VtxkDS0ordjOkon xS9dGvJZQOuMQd7kNiz29oIDpKc8N7madO6xhSdGp2IUNqwAIqLHkv5qWY6fzVVD PhPcrJOteFDkHlQSl97Fk5IrITtURwhC07FmKe/xPCTpG4q3FH0JLS/0obx5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEkSZmEVHY4fKno4lR2IasA0qOa8wHwYDVR0j BBgwFoAUKcBkDdkHbcBM+KOQ6nPfwODnz5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZGFmOWYwZi00ZmIxLTQwYzAtYjM4MC01OWEzOGRiYzlhMTYvMC8yOUMwNjQwREQ5 MDc2REMwNENGOEEzOTBFQTczREZDMEUwRTdDRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBFMEU3 Q0Y5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGRhZjlmMGYtNGZiMS00MGMwLWIz ODAtNTlhMzhkYmM5YTE2LzAvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RG QzBFMEU3Q0Y5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNsysm32Vp6KDcVSzWPR/8QZioJCVyZMSID FiL3XObdDuJFcEenvvjP3mI7+qrw96gKubEqppwKkn6w83UENM+ToANXf0BNXHO5 NlLggT2vNjI0Dj1EiJUXXnke2ayunTiNqnff/CfV/n9kHJQEzZDJ0uIIdzZyRdsc sSqpy00ga5EzXKyOq6t3VGYe6Z8Kz4vlS6yY6WqcvLQKVIuI5uh7cVEBHuO80m2E Hrxq0RabU2ChXI4xnKPrPeZn76O4BFw9nxNBN/OsyhkyNc/5SbrlXL0rmVjh29DT PqZnKyv2MuXldx4na1gMXCmfXsZklpHLvvuymTSI5fMtTOQUEg4= -----END CERTIFICATE-----Generated at Thu Mar 19 09:34:28 2026 by rpki-client